CVE-2005-3010

CuteNews < 1.4.0 - Remote Code Execution via HTTP_CLIENT_IP Header Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-3010. PoCs published by rgod.

AI-analyzed exploit summary This exploit targets CVE-2005-3010 in CuteNews 1.4.0 (and possibly prior versions) by injecting a PHP shell into the flood.db.php file via HTTP header manipulation (Client-Ip). It then executes arbitrary commands through the injected shell.

Description

Direct static code injection vulnerability in the flood protection feature in inc/shows.inc.php in CuteNews 1.4.0 and earlier allows remote attackers to execute arbitrary PHP code via the HTTP_CLIENT_IP header (Client-Ip), which is injected into data/flood.db.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by rgod · phpwebappsphp

https://www.exploit-db.com/exploits/1221

View Code ZIP pw:eip

This exploit targets CVE-2005-3010 in CuteNews 1.4.0 (and possibly prior versions) by injecting a PHP shell into the flood.db.php file via HTTP header manipulation (Client-Ip). It then executes arbitrary commands through the injected shell.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: CuteNews <= 1.4.0

No auth needed

Prerequisites: PHP with register_globals enabled · CuteNews installation with writeable data directory

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Exploit vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/14869

Exploit mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/411057

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/14

Scores

EPSS 0.0634

EPSS Percentile 92.7%

Details

Status published

Products (1)

cutephp/cutenews < 1.4.0

Published Sep 21, 2005

Tracked Since Feb 18, 2026